VDB
GO-2025-3956
GO-2025-3956
PUBLISHED
Unexpected paths returned from LookPath in os/exec
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | nvidia-nsight-compute-13.0 | 0, 0 |
| chainguard | memcached-exporter-fips | 0, 0, 0 |
| wolfi | blobfuse2 | 0, 0, 0 |
| chainguard | karpenter-fips-1.1 | 0, 0, 0 |
| chainguard | terraform-provider-sendgrid-fips | 0, 0 |
| chainguard | modelmesh-runtime-adapter | 0, 0 |
| chainguard | docker-credential-ecr-login | 0, 0 |
| chainguard | kubeflow-katib | 0, 0, 0 |
| wolfi | vault-benchmark | 0, 0, 0 |
| chainguard | kube-vip-cloud-provider | 0, 0, 0 |
| chainguard | gostatsd | 0, 0 |
| wolfi | sftpgo-plugin-pubsub | 0, 0, 0 |
| chainguard | lvm-driver | 0, 0, 0 |
| chainguard | cloud-provider-aws-1.30 | 0, 0 |
| chainguard | stakater-reloader-0.0.119 | 0, 0 |
| wolfi | container-object-storage-interface | 0, 0, 0 |
| chainguard | octo-sts | 0, 0 |
| wolfi | kuberay-operator | 0, 0, 0 |
| chainguard | mongodb-kubernetes-operator | 0, 0 |
| chainguard | pvc-autoresizer | 0, 0 |
…and 121 more
Timeline
- Sep 18, 2025 CVE Published
- Jul 24, 2026 CVE Updated